154 citations · 509 across the 39 of their papers we have counts for
39 papers
Robust Automatic Speech Recognition via WavAugment Guided Phoneme Adversarial Training
Gege Qi, Yuefeng Chen, Xiaofeng Mao +4
Developing a practically-robust automatic speech recognition (ASR) is challenging since the model should not only maintain the original performance on clean samples, but also achie…
FairRec: Fairness Testing for Deep Recommender Systems
Huizhong Guo, Jinfeng Li, Jingyi Wang +5
Deep learning-based recommender systems (DRSs) are increasingly and widely deployed in the industry, which brings significant convenience to people's daily life in different ways.…
ImageNet-E: Benchmarking Neural Network Robustness via Attribute Editing
Xiaodan Li, Yuefeng Chen, Yao Zhu +3
Recent studies have shown that higher accuracy on ImageNet usually leads to better robustness against different corruptions. Therefore, in this paper, instead of following the trad…
TransAudio: Towards the Transferable Adversarial Audio Attack via Learning Contextualized Perturbations
Qi Gege, Yuefeng Chen, Xiaofeng Mao +5
In a transfer-based attack against Automatic Speech Recognition (ASR) systems, attacks are unable to access the architecture and parameters of the target model. Existing attack met…
Rethinking Out-of-Distribution Detection From a Human-Centric Perspective
Yao Zhu, Yuefeng Chen, Xiaodan Li +6
Out-Of-Distribution (OOD) detection has received broad attention over the years, aiming to ensure the reliability and safety of deep neural networks (DNNs) in real-world scenarios…
Context-Aware Robust Fine-Tuning
Xiaofeng Mao, Yuefeng Chen, Xiaojun Jia +3
Contrastive Language-Image Pre-trained (CLIP) models have zero-shot ability of classifying an image belonging to "[CLASS]" by using similarity between the image and the prompt sent…
Synthesizing Coherent Story with Auto-Regressive Latent Diffusion Models
Xichen Pan, Pengda Qin, Yuhong Li +2
Conditioned diffusion models have demonstrated state-of-the-art text-to-image synthesis capacity. Recently, most works focus on synthesizing independent images; While for real-worl…
RoChBert: Towards Robust BERT Fine-tuning for Chinese
Zihan Zhang, Jinfeng Li, Ning Shi +6
Despite of the superb performance on a wide range of tasks, pre-trained language models (e.g., BERT) have been proved vulnerable to adversarial texts. In this paper, we present RoC…
Boosting Out-of-distribution Detection with Typical Features
Yao Zhu, YueFeng Chen, Chuanlong Xie +6
Out-of-distribution (OOD) detection is a critical task for ensuring the reliability and safety of deep neural networks in real-world scenarios. Different from most previous OOD det…
Enhance the Visual Representation via Discrete Adversarial Training
Xiaofeng Mao, Yuefeng Chen, Ranjie Duan +6
Adversarial Training (AT), which is commonly accepted as one of the most effective approaches defending against adversarial examples, can largely harm the standard performance, thu…
Diverse Instance Discovery: Vision-Transformer for Instance-Aware Multi-Label Image Recognition
Yunqing Hu, Xuan Jin, Yin Zhang +5
Previous works on multi-label image recognition (MLIR) usually use CNNs as a starting point for research. In this paper, we take pure Vision Transformer (ViT) as the research base…
D^2ETR: Decoder-Only DETR with Computationally Efficient Cross-Scale Attention
Junyu Lin, Xiaofeng Mao, Yuefeng Chen +3
DETR is the first fully end-to-end detector that predicts a final set of predictions without post-processing. However, it suffers from problems such as low performance and slow con…
Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains
Qilong Zhang, Xiaodan Li, Yuefeng Chen +4
Adversarial examples have posed a severe threat to deep neural networks due to their transferable nature. Currently, various works have paid great efforts to enhance the cross-mode…
Unrestricted Adversarial Attacks on ImageNet Competition
Yuefeng Chen, Xiaofeng Mao, Yuan He +34
Many works have investigated the adversarial attacks or defenses under the settings where a bounded and imperceptible perturbation can be added to the input. However in the real-wo…
Adversarial Attacks on ML Defense Models Competition
Yinpeng Dong, Qi-An Fu, Xiao Yang +25
Due to the vulnerability of deep neural networks (DNNs) to adversarial examples, a large number of defense techniques have been proposed to alleviate this problem in recent years.…
DRDF: Determining the Importance of Different Multimodal Information with Dual-Router Dynamic Framework
Haiwen Hong, Xuan Jin, Yin Zhang +4
In multimodal tasks, we find that the importance of text and image modal information is different for different input cases, and for this motivation, we propose a high-performance…
RAMS-Trans: Recurrent Attention Multi-scale Transformer forFine-grained Image Recognition
Yunqing Hu, Xuan Jin, Yin Zhang +4
In fine-grained image recognition (FGIR), the localization and amplification of region attention is an important factor, which has been explored a lot by convolutional neural netwo…
Towards Robust Vision Transformer
Xiaofeng Mao, Gege Qi, Yuefeng Chen +5
Recent advances on Vision Transformer (ViT) and its improved variants have shown that self-attention-based networks surpass traditional Convolutional Neural Networks (CNNs) in most…
QAIR: Practical Query-efficient Black-Box Attacks for Image Retrieval
Xiaodan Li, Jinfeng Li, Yuefeng Chen +5
We study the query-based attack against image retrieval to evaluate its robustness against adversarial examples under the black-box setting, where the adversary only has query acce…
Spatial-Phase Shallow Learning: Rethinking Face Forgery Detection in Frequency Domain
Honggu Liu, Xiaodan Li, Wenbo Zhou +5
The remarkable success in face forgery techniques has received considerable attention in computer vision due to security concerns. We observe that up-sampling is a necessary step o…
Enhancing Model Robustness By Incorporating Adversarial Knowledge Into Semantic Representation
Jinfeng Li, Tianyu Du, Xiangyu Liu +3
Despite that deep neural networks (DNNs) have achieved enormous success in many domains like natural language processing (NLP), they have also been proven to be vulnerable to malic…
The Open Brands Dataset: Unified brand detection and recognition at scale
Xuan Jin, Wei Su, Rong Zhang +2
Intellectual property protection(IPP) have received more and more attention recently due to the development of the global e-commerce platforms. brand recognition plays a significan…
Composite Adversarial Attacks
Xiaofeng Mao, Yuefeng Chen, Shuhui Wang +3
Adversarial attack is a technique for deceiving Machine Learning (ML) models, which provides a way to evaluate the adversarial robustness. In practice, attack algorithms are artifi…
Sharp Multiple Instance Learning for DeepFake Video Detection
Xiaodan Li, Yining Lang, Yuefeng Chen +5
With the rapid development of facial manipulation techniques, face forgery has received considerable attention in multimedia and computer vision community due to security concerns.…